services: add code-server web IDE at code.nordhammer.it

Deploys code-server on FredOS-Mediaserver (port 4444, user fred) with
Authelia one_factor auth and nginx reverse proxy. Includes claude-code
in system packages for use in the integrated terminal.

Also fixes anyrun launcher width to absolute 350px (was a tiny fraction).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

common.nix

@@ -40,6 +40,7 @@
     ./services/crowdsec.nix
     ./services/sabnzbd.nix
     ./services/forgejo-runner.nix
+    ./services/code-server.nix
   ];
 
   ### Make build time quicker

services/authelia.nix

@@ -81,6 +81,7 @@ in
             { domain = "torrent.nordhammer.it";  policy = "one_factor"; }
             { domain = "profilarr.nordhammer.it"; policy = "one_factor"; }
             { domain = "sabnzbd.nordhammer.it";   policy = "one_factor"; }
+            { domain = "code.nordhammer.it";       policy = "one_factor"; }
           ];
         };
 

services/code-server.nix

@@ -0,0 +1,26 @@
+# services/code-server.nix — Web IDE at code.nordhammer.it, protected by Authelia.
+#
+# Run as fred so it has access to ~/nixos-config and the rest of the home dir.
+# Auth is handled entirely by Authelia (auth = "none" disables code-server's own
+# password gate). After deploy, install the Claude extension from a terminal:
+#   code-server --install-extension anthropic.claude-code
+# and set ANTHROPIC_API_KEY in ~/.config/code-server/env or via a shell profile.
+{ config, pkgs, lib, ... }:
+{
+  config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
+    services.code-server = {
+      enable = true;
+      host = "127.0.0.1";
+      port = 4444;
+      auth = "none";
+      user = "fred";
+      extraArguments = [
+        "--disable-telemetry"
+        "--disable-update-check"
+      ];
+    };
+
+    # Make the claude CLI available in code-server's integrated terminal.
+    environment.systemPackages = [ pkgs.claude-code ];
+  };
+}

services/nginx.nix

@@ -114,6 +114,7 @@ in
         "adguard.nordhammer.it"  = protectedProxy 3000;
         "profilarr.nordhammer.it" = protectedProxy 6868;
         "sabnzbd.nordhammer.it"  = protectedProxy 8085;
+        "code.nordhammer.it"     = protectedProxy 4444;
 
         # --- Local-only: serves update history JSON to Homepage's customapi widget ---
         "homepage-updates.local" = {

settings/hyprland.nix

@@ -326,7 +326,7 @@ in
           plugins = [ "${pkgs.anyrun}/lib/libapplications.so" ];
           x.fraction = 0.5;
           y.fraction = 0.25;
-          width.fraction = 0.1;
+          width.absolute = 350;
           height.absolute = 0;
           margin = 16;
           hideIcons = false;